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HIGHER DESCENTS ON AN ELLIPTIC CURVE 
WITH A RATIONAL 2-TORSION POINT 


TOM FISHER 

Abstract. Let E be an elliptic curve over a number field K. Descent calcula¬ 
tions on E can be used to find upper bounds for the rank of the Mordell-Weil 
group, and to compute covering curves that assist in the search for generators 
of this group. The general method of 4-descent, developed in the PhD theses 
of Siksek, Womack and Stamminger, has been implemented in Magma (when 
K = Q) and works well for elliptic curves with sufficiently small discriminant. 
By extending work of Bremner and Cassels, we describe the improvements that 
can be made when E has a rational 2-torsion point. In particular, when E has 
full rational 2-torsion, we describe a method for 8-descent that is practical for 
elliptic curves E/Q with large discriminant. 


1. Introduction 

Let E be an elliptic curve over a number field K. For each integer n>2 there 
is a short exact sequence of abelian groups 

0 ^ E{K)/nE{K) S^'^\E/K) -> m{E/K)[n] 0. 

The n-Selmer group S^'^\E/K) is finite and effectively computable. It gives in¬ 
formation about both the Mordell-Weil group E{K) and the Tate-Shafarevich 
group Ill{E/K). The elements of S^'^\E/K) may be interpreted geometrically as 
n-coverings of E. An n-covering of E is a pair (C, vr), where C/K is a smooth 
curve of genus one, and tt : U —)■ E is a morphism defined over K, that fits in a 
commutative diagram 


C 



where the vertical map is an isomorphism defined over K. The Selmer group 
S^"'\E/K) consists of those n-coverings {C, tt) that are everywhere locally soluble, 
i.e. C{Ky) 7 ^ 0 for all places v of K. The subset of those n-coverings with 
C{K) 7 ^ 0 form the image of E{K)/nE{K). Thus if C/E is a counter-example to 
the Hasse Principle then it represents a non-trivial element of III(E/E). 
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A first descent computes the group /K) and represents its elements as 

pairs (C, tt). To compute the group E{K)/nE{K), and hence the rank of E{K), 
we must decide which of these n-coverings has a rational point, that is, a point 
with co-ordinates in K. Unfortunately there is no known algorithm guaranteed to 
determine whether a genus one curve C/K has a rational point. In practice one 
starts by searching for rational points of small height. If no points are found, this 
might be because C has no rational points, or because the rational points all have 
large height. We attempt to distinguish these two cases by a second descent. 
Taking Galois cohomology of the short exact sequence 

0— )-E[n] — )-E[n^] — )-E[n] —)-0, 

and restricting to Selmer groups, gives an exact sequence 

E{K)[n]^S^'^\E/K)^S^^^\E/K) ^ S^^\E/K). 

There are then inclusions 

E{K)/nE{K) C Im(a) C S^^\E/K). 

Moreover, the image of a is the kernel of the Cassels-Tate pairing 

S^^\E/K) X S^^\E/K) Q/Z. 

If a maps (G 2 , vfi) to (Gi, tti) then z /2 factors via tti to give a commutative diagram 

E - ^E - ^E 

[n] [n] 

where the vertical maps are isomorphisms dehned over K. 

A second descent computes the hbre of a above (Gi,7ri) and represents its 
elements as pairs (^ 2 , 712 ). If the hbre is empty then CfiK) = 0. Otherwise the 
hbre is a coset of the image of K). We can then try searching for rational 

points on each of the genus one curves G 2 . If we still do not hnd a rational point 
then a third descent may be attempted, and so on. 

More generally, if 0 : U —)■ U' is an isogeny of degree n, and : E' ^ E is the 
dual isogeny, then there are exact sequences 

(1) 0 ^ E’{K)/(j)E{K) S^^\E/K) m{E/Kfifi] 0 

and 

E{K)[(t)\ — >S^^\E'/K)^S^^\E'/K) ^ S^^\E/K). 

Moreover, the image of a is the kernel of the Cassels-Tate pairing 

S^^\E/K) X S^^\E/K) Q/Z. 

The terminology of hrst and second descents carries over as before. 
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In this paper we are concerned with (p : E ^ E' an isogeny of degree 2. Thus our 
work applies to any elliptic curve with a rational 2-torsion point. The hrst descent 
in this case is descent by 2-isogeny. This is very well known; see for example |C21 
§14] or |Sill X.4.9]. The second descent is described in |BSD1 §5] and [Cr], although 
in neither case do the authors claim any particular originality. This corresponds 
to a 2-descent on E. The starting point for our work is the paper of Bremner 
and Cassels |BC] that carries out the third and fourth descents for elliptic curves 
T'/Q of the form y'^ = x{x^ — 4p), where p is a prime with p = 5 (mod 8). This 
corresponds to a 4-descent on E. As observed by Siksek |Sikl §4.6], their method 
can be applied more generally. 

The general method of 4-descent, developed in [Sik] . |MSSj . |Woj . [St] , (see also 
IE2l). requires that we compute the class group and units of a degree 4 extension 
of K. This has been implemented in Magma [BCP] (when K = Q) and works well 
for elliptic curves with sufficiently small discriminant. In contrast the method of 
Bremner and Cassels (specihc to elliptic curves with a rational 2-torsion point) 
requires no class group and unit calculations, beyond those for the held K itself. 
Instead the global part of the calculation requires that we solve conics over K, 
and over quadratic extensions of K. 

We make the following improvements. 

• We use the Cassels-Tate pairing to efficiently compute upper bounds for 
the rank. This was not required in [BCj . since for the curves considered 
there, descent by 2-isogeny already shows that the rank is at most 1. 

• We extend to a hfth descent, and in cases where E has full rational 2- 
torsion, also a sixth descent. The latter corresponds to 8-descent on E. 

• We replace the problem of solving a conic over a quadratic extension of K, 
with that of solving a quadric surface over K. Taking K = Q the latter 
can be solved efficiently using an algorithm of Simon |S2j . 

As discussed further in Section [TOl the motivation for our work came from the 
desire to hnd curves of large rank in certain families of elliptic curves over Q, 
for example the family of elliptic curves with a given torsion subgroup (of even 
order), or the quadratic twists of a given elliptic curve with a rational 2-torsion 
point. The methods we describe can be used to quickly eliminate many curves 
which on the basis of (say) descent by 2-isogeny appear to be candidates for large 
rank, but which instead have large 2-primary part of III. 

The paper is organised as follows. In the hrst three sections we let (p : E ^ E' 
be any isogeny of prime degree p. In Section [2] we introduce the higher descent 
pairings we use to bound the rank of an elliptic curve. Then in Sections [3] and H] 
we explain how these pairings are related to the Cassels-Tate pairing, and outline 
our methods for computing them. In Section [5] we give a short self-contained 
account of 4-descent on an elliptic curve with a rational 2-torsion point. This is 
then related to the work of Bremner and Cassels in Section |6l In the next two 
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sections we describe our refinements for carrying out the fifth and sixth descents. 
In Section [H] we explain how to replace the conics over quadratic extensions by 
quadric surfaces. Finally in Section [10] we give some examples. 

Our implementation of the methods described in this paper (in the case K = <Q) 
has been contributed to Magma (version 2.21) and is available via the function 
TwoPowerlsogenyDescentRankBound. 

2. Higher descent pairings 

Let (p : E ^ E' he an isogeny of elliptic curves defined over a number field K. 
We suppose that deg0 = p is a prime. By [Sill X.4.7] there is an exact sequence 

h^E{K) [0] ^E{K) [p] ^E\K) g\ 

— >E'{K)/(j)E{K) — >E{K)/pE{K) — >E{K)/^E'{K) —^0. 

Writing dim for the dimension of an Fp-vector space, it follows that 

rank E(K) = dim ^ + dim -dim E(K) Id] — dim E'iK) \(h]. 

Let Si = S^'^\E/K) and S'( = S^^\E'/K) be the Selmer groups attached to 
the isogenies (p and (p. More generally let Sm C Si be the image of S^^"'\E'/K) 
if m = 2n is even, and the image of S^^'^^^E/K) if m = 2n + 1 is odd. The 
subspaces S'^ C S[ are defined in the same way, after swapping the roles of E 
and E'. There are inclusions of Fp-vector spaces 

(2) c ... c S 3 C c S, = SW(B/ii') 
and 

(3) C ... C C C = S^^\E'/K). 

<PE'{K) 

As we prove in Section jS] the Cassels-Tate pairing induces the following pairings 
of Fp-vector spaces. 

Theorem 2.1. Let m > 1 be an integer. 

(i) If m is odd then there are alternating pairings 

©m : Sm X Sm “t Fp and Q'm '■ S'm X S'm —t Fp 

with kernels Sm+i and Sm_^_i. 

(ii) Ifm is even then there is a pairing 

©m : Sm X S'm —t Fp 
with left kernel Sm+i and right kernel 
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It is clear that each time we compute one of the pairings ©m or ©^ our upper 
bound for the rank of E{K) either stays the same (if the pairing is identically zero) 
or decreases by an even integer. The following lemma is useful for comparing our 
bounds on the rank with those obtained by other methods. 

Lemma 2.2. The upper bound on the rank of E{K) obtained by p"^-descent is 

laxikE{K) < dimS' 2 n-i + dimS'^^ — ddm.E{K)[(j)\ — dim.E'{K)[(j)]. 

Proof: From the commutative diagram with exact rows 

E\K)[^] -- S^P"~'^\E/K) -- S^P"\E/K) -- S^^\E'/K) 

h 

E\K)[^] -- S^^\E/K) -- S^P\E/K) -- S^^\E'/K) 

we obtain an exact sequence 

Therefore the upper bound obtained by p"'-descent, 

iai)tkE{K) < dimIm(/3) — dimE{K)\p\, 
is the same as that in the statement of the lemma. 

The hltrations ([2]) and ([3]) also give information about the Tate-Shafarevich 
groups of E and E'. Let C HIi = m{E/K)[(t)\ be the image of m{E'/K)\p^] 
ii m = 2n is even, and the image of U1{E/K)[p'^(j)] if m = 2?7, + 1 is odd. The 
subspaces III(„ C III) = I11{E'/K)[(j)] are dehned in the same way, after swapping 
the roles of E and E'. For each integer m > 1 we have short exact sequences 

Q^E\K)/cfE{K)^S^^m^-^d 

and 

In situations where we succeed in computing the rank of E{K) we have 111^ = 
II1(„ = 0 for all m sufficiently large. 

Remark 2.3. Suppose we have computed 111^ and for all m > 1. Then 
from the exact sequences 

d-^m{E'iK) -^m{E'iK) [p^] ^nisn^o, 
o^m(E/iF)[p"]-^m(E/iF)[p>]^m2„+i^o, 

and their analogues for in(„, we can read off the orders of III(£'/iF)[p"'] and 
'ni{E'/K)[p'^] for all n > 1. This information determines the group structure of 
the p-primary parts of III(£'/iF) and in.{E'/K). 
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In this paper we take p = 2. We show how to compute Sm and for m < 5, 
by a method whose global part only requires that we solve quadratic forms of 
ranks 3 and 4 over K. When E has full rational 2-torsion we also compute S'g. By 
Lemma [2.21 the upper bound iai\kE{K) < dim 5*5 -|- dimS'g — 2 is then the same 
as that obtained by 8 -descent on E. 

3. The Cassels-Tate pairing 

Let E be an elliptic curve over a number held K. The Cassels-Tate pairing is 
an alternating bilinear pairing 

( , ) : m{E/K) X m{E/K) Q/Z. 

It has the following properties. 

Theorem 3.1. Let 'ip \ C ^ D he an isogeny of elliptic curves over K. 

(i) {ipx^y) = {x,fy for all x G U1{C/K) and y G m{D/K). 

(ii) X G /K) belongs to the image of : III(C'/iL) — Iil{D j K) if and 
only if {x,y) = 0 for ally in the kernel of ip : I\1{D/K) —)■ ILI(C/iL). 

Proof: For (i) see [Cll Section 2], and for (ii) see m Theorem 3]. These results 
do not depend on hniteness of III. □ 

Proof of Theorem 12. It We keep the notation of Section [2l except that the 
pairings ©m and will take values in ^Z/Z instead of Fp. We make frequent 
implicit use of the exact sequence ([T]). In particular it makes sense to evaluate the 
Cassels-Tate pairing on Selmer group elements. 

(i) Let m = 2n + 1. Let ^,17 G Sm, and let G /K) with ^ and 

Pi I—>• p. We dehne Qm{^,v) = These last two expressions are 

equal by Theorem I3.1f ii with p) = p^. Therefore Qm{^,v) is independent of the 
choices of and pi. By Theorem I3.1f iil the kernel of ©m is 

{PeSml (e,hi) = 0 for all Pi G S^p"^\E/K)} = Sm+i- 

Now let ^p = or according as n is even or odd. By Theorem I3.1f il 

we have 

= (6, "0^6) = = 0. 

Therefore ©^ is alternating. The dehnition and properties of are obtained in 
the same way, after swapping the roles of E and E'. 

(ii) Let m = 2n. Let f G Sm and p G S'^, and let .^1 G S^p’^\E'/K) and pi G 

S^p^\E/K) with .^1 ^ and pi ^ p. We dehne Qmi^,v) = {^i,v) = 

These last two expressions are equal by Theorem l3.11 B with ip = p'^~^cp. Therefore 
Qm{.^,v) is independent of the choices of .^1 and pi. By Theorem 13. If hi the left 
kernel of Qm is 

{PeSml (e,hi) = 0 for all Pi G S^p^\E/K)} = Sm+i- 
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Likewise the right kernel is □ 

Next we describe a method for computing the Cassels-Tate pairing. Suppose 
that i?[0] = Up and E'[(j)] = 'L/p'L as Galois modules. Then i?[0]) = 

K^/{K^)P and H‘^{K, E[(j)]) = Bt{K)[p]. If : i?' —)■ F is an isogeny dehned 
over K then from the short exact sequence 

0 F[0] —)■ F['^0] E'^tp] —)■ 0 

we obtain a long exact sequence 

(4) ... ^ ^ H\K,E[ij(l)\) ^H\K,E'[Y]) ^Br(F)[p] ^ ... 

Let X G S^'^\E'/K) and y G S^^\E'/K). By the local-to-global principle for 
the Brauer group, x lifts to x' G E[^{K, Eppcp]). Let C and Di be the covering 
curves corresponding to x and x'. These £t in a commutative diagram 





where the vertical maps are isomorphisms defined over F, but all other maps are 
morphisms defined over K. 

Let T be a generator for F'(iL)[0] = 'L/p'L, and let b G Div°(G) correspond to 
T under the isomorphism of Galois modules Pic'^(G) = E'. Since T G E'{K) and 
C is everywhere locally soluble, we may choose b to be F-rational. Then there 

exists / G K{C) with div(/) = pb. We say that / is a pushout function. If we 

scale / suitably then 7i*f = g^ for some g G K{Di). In other words, if we identify 
K{C) as a subfield of K{Di) via pull-back by tt, then K{Di) = K{C){f/J). 

For each place v oi K there is a local pairing 

(5) ( , ). : H\K,, F[0]) X H\K,, F'[0]) ^ ^L/L 

given by the Weil pairing, cup product and the local invariant map. We identify 
Lr^(F„,F[0]) = Kf /{Kfy. The Gassels-Tate pairing is given by 

{x^y) = '^ifiPv),y)v 

V 

where for each place n of F we choose a local point G C{KY) avoiding the 
zeros and poles of /. This is a sum over all places of K, but in fact there is no 
contribution from the primes outside a finite set of primes where C and / have 
bad reduction. 

The Selmer group attached to (p is 

S^‘^\E/K) = [fe /{KYP\ie Im(5^,^) for all places v } 
where 5^^.^ '■ E'{Ky) —)■ Kf /{KfY is the local connecting map. 
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Let be the covering of C that is iL-birational to {/(-P) = G C x Gm- 
The Selmer set associated to the pair (C, /) is 

/) = {e e K^/{K^f I D^{K^) ^ 0 for all places n } 

= {^ G /{K^y \ ^ = f{Py) mod Im(50^^) for all places v }. 


The Selmer set tells us which twists of Di (as a covering of C) are everywhere 
locally soluble. If {x, y) ^ 0 for some y G [E'/K) then there are no such twists, 
and the Selmer set S{C,f) is empty. Otherwise S'(C',/) is a coset of S^‘I’\E/K) 
in /{K^Y. If we have already computed the pairing (using the formula above) 
then we can solve for a coset representative by linear algebra over Fp. 

In this paper we take p = 2. Then E[(j)] = E'[(j)] = Z/2Z and the local pairing (|5]) 
is the usual (i.e. quadratic) Hilbert norm residue symbol. As above, let C be the 
covering curve corresponding to x G S^'^\E'/K). Suppose we know equations 
for C. Then by computing a pushout function / on O', and using it to compute 
the Cassels-Tate pairing, we can determine whether x lifts to x' G S^'^‘^\E/K). If 
it does lift then the covering curve corresponding to x' is of the form for some 
S, G S{C,f). In particular we know equations for D^. We can then replace Y by 
-00, swap the roles of E and E', and repeat. 

At each stage we have a basis for Sm C / {K^Y, and for each basis element 
equations for an everywhere locally soluble 2”^-isogeny covering of E' that factors 
via the 0-covering of E' corresponding to Using this data we can compute the 
pairing ©„, in Theorem 12.11 and hence the subspace Sm+i C Sm- For the next 
iteration we need to compute an everywhere locally soluble 2'"’''^-isogeny covering 
for each basis element of S'^+i. It often happens that these curves are degree-2 
coverings of some of the curves we already found. However, in general a rather 
subtle iterative procedure is required. This is the subject of Section 01 

The two key issues we must address are the following. 

• How do we hnd “nice” equations for the covering curves? 

• How do we compute the pushout functions? 

These questions are related, in that a good answer to the hrst question helps with 
answering the second. The proof that pushout functions exist uses the local-to- 
global principle for Br(A')[2]. So one might expect that the second question comes 
down to solving conics over K. Indeed if A' is a number held, then every element 
of Br(iF)[2] can be represented by a conic. However this last statement is not true 
over arbitrary helds, and the proof over number helds itself uses the local-to-global 
principle for the Brauer group. So the best we can say for arbitrary m (see m) 
is that the second question reduces to that of hnding rational points on certain 
Brauer-Severi varieties. 
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4. An iterative procedure 


In this section we describe the structure of our program for computing the 
subspaces Sm and S'^. The bookkeeping is somewhat involved, but is needed to 
get around the fact that the formula we gave in Section [3|, for computing the 
Cassels-Tate pairing, only applies when one of the arguments is killed by the 
p-isogeny 0 or its dual <p. 

First we lighten our notation by writing 


Sel(m) = 


Sipn /K) or {E'/K) if m = 2n, 
S(P^^){E/K) or S^''^\E'/K) if m = 2 n + 1 . 


Which of the two groups we mean is often determined by the context. For example 
when we write 


Sel(3)^Sel(2)-^Sel(l) 


this could either mean 


or 

whereas 

could either mean 

or 


-^S^^\E/K) {E'/K)^S^^^ {E/K) 

{E'/K) — {E/K) — (E'/K ), 
Sel(l)-^ Sel( 2 )^ Sel(3)^ ... 

S^^\E/K) — >S^p\E/K) — >S^p‘^\E/K) —^... 
S^^\E'/K)^S^p\E'/K)-^S^p^\E'/K)^ .... 


Let Sm be the image of Sel(m) —)■ Sel(l). This Fp-vector space was denoted 
Sm or S'm in Section [2l We also write 0^ : Sm x Sm Fp for the pairings in 
Theorem 12.11 even though some of the Sm and 0^ should really be S'^ and 0^. 
These abuses of notation are made to simplify the results in this section, and (with 
the exception of Lemma 18.11) will not be used elsewhere in the paper. 

Let ai,/5i G Sm- Then 0m(ai,/5i) = {am, Pi) where am G Sel(m) is any lift of 
«!. In order to compute 0m, and hence by Theorem 12.11 the subspace Sm+i, we 
must describe how to lift ai to am- In the case m = 3 it is convenient to break 
this down into the following steps. 

(i) Solve for 0^2 G Sel(2) with a 2 ^ ai. 

(ii) Solve for ^ & Si with (^ + 02 , p) = 0 for all rj ^ Si. 

(hi) Solve for G Sel(3) with 03 1 —)■ .^ + Q! 2 - 

For general m > 1 we use the following algorithm. 
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Algorithm 4.1. INPUT: ai G Sm and the pairings Qi for i < m. 
OUTPUT: am G Sel(m) with am •—t Oi- 


(1) if m = 1 then return ai; end if 


( 2 ) 

fc 1 


(3) 

t— m — 1 


(4) 

while true do 


(5) 

solve for ak+i 

G Sel(A: 

( 6 ) 

/c fc + 1 


(7) 

if k = m then 

return 

(8) 

t— 1 


(9) 

while 4 _i = 4 

do 

( 10 ) 

k ^ k — 1 


( 11 ) 

tk tk 3- f 


( 12 ) 

end while 


(13) 

1 tk 


(14) 

solve for f E Si with 

(15) 

ak + ak 


(16) 

end while 



+ 1) with Ofc+i I-)- ttfe 
am ; end if 

+ {(^k+e-i,ri) = ^ for all 


r] e Se. 


The next two lemmas are used to show that Algorithm 14.11 is correct. 


Lemma 4.2. Suppose ak G Sel(fc) lifts to ak+e-i G Sel(/c + £ — 1). Let ^ G Sel(l). 
The following are equivalent. 

(i) {f + Ofe, /9) = 0 for all {3 G Sel(£), 

(ii) i ^ Si and 0£(^, rj) + (ofc+^-i, h) = 0 for all p G Se. 

Moreover, if ak eG- Ofc-i £ Sel(fc —1) and {ak-i, (3) = 0 for all {3 G Sel(t' + 1), then 
(i) and (ii) hold for some f G Sel(l). 

Proof: We make repeated use of Theorem 13.11 Since at lifts to Sel(fc + £ — 1) 
we have {ak, (3) = 0 for all (3 G Sel(£ — 1). Assuming (i) we have {f,(3) = 0 for all 
(3 G Sel(£ — 1), and therefore f E Si. li (3 E Sel(£) and p E Si with (3 ^ p then 

{f + ak, (3) = if, (3) + {ak, (3) = Qi{f, p) + {ak+i-i, p). 

This proves the equivalence of (i) and (ii). For the last part, Theorem l3.1f iil shows 
there exists ak+i E Sel(fc + 1) with ak+i eG- Ofe-i. Let ak G Sel(A;) be the image of 
ak+i- By Theorem I3.1f il we have {ak, (3) = 0 for all (3 G Sel(£). Since ak and ak 
have the same image in Sel(fc — 1) we have ak = f + ak for some f E Sel(l). This 
proves (i). □ 
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Lemma 4.3. At the start and end of the main loop in Algorithm \4.1 
(y-k «fc-i HA 02 i-A a 1 and 


we have 


( 6 ) = 0 for all (3 G Sel(tj) and 1 < j <k. 

Proof: Initially we have k = 1 and = m — 1. Since ai is in Sm it satisfies 
(ai, /9) = 0 for all jd G Sel(m — 1). At the end of each loop it suffices to prove ([6]) 
with j = k, since the cases j < k carry over from the previous iteration. It is 
easy to check that each time we reach line 14, we have k > 2 and tk-i > tk = i- 
Moreover ak+£-i is the element computed in line 5. By ([ 6 ]) from the previous 
iteration we have {ak-i, /3) = 0 for all /3 G Sel(£ + 1). Lemma l4^ shows that there 
exists f & Sg satisfying the condition on line 14, and that after modifying ak on 
line 15, the new ak satishes ([ 6 ]) with j = k. □ 

As a special case of Lemma 14^ we have {ak,/3) = 0 for all (3 G Sel(ffc). Since 
tk > 1, the element ak+i in line 5 exists by Theorem I3.1lf iih This completes the 
proof that Algorithm 14.II is correct. 

The reader is encouraged to write out the sequence ti,... ,tk at each stage of 
the algorithm (for some small values of m). It is not hard to show that if m > 2 
then we start the main loop exactly 2™'“^ times. This exponential growth does 
not concern us much, since (even in the case p = 2) the computation of pushout 
functions (required in lines 5 and 14, as explained in Section [3]) is only practical 
for small values of m. 

In practice we can often take ^ = 0 in line 14. In such cases we may already 
know (Tfc+i G Sel(fc +1) with ak+i ha ak. There is then no need to recompute ak+i 
in line 5. 


5. Computing 4-coverings 

In this section we give a brief self-contained account of 4-descent on an elliptic 
curve with a rational 2 -torsion point. As we discuss in Section [ 6 |, it is based on 
work of Bremner and Cassels ra. See the introduction for further references. 
Let E be an elliptic curve over a held K with a rational 2-torsion point T, say 

(7) E ■. = x{x^ + ax d-h) T = (0,0) 

for some a,b E K. The discriminant condition is 2b{a^ — 46) ^ 0. Let (f : E ^ E' 
be the 2-isogeny with kernel {0,T} and let (p : E' ^ E be the dual isogeny. The 
connecting map 6 : E{K)/cpE'{K) — )• /{K^Y is given by P = {x,y) ha x for 
all P ^ 0,T. 

Suppose P = (x,?/) G E{K) with 5{P) = mod {K^^. Then x = fi{s/t)‘^ 
and y = fi{rs/P) where 

( 8 ) 
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Parametrising a conic over K gives 

(9) (s^ ■.r) = (/(/, m) : g{l, m) : h{l, m)) 

where /, g and h are binary quadratic forms. Then 

( 10 ) and g{l,m) = ^ 2 t‘^ 

for some ^2 ^ Parametrising each of these conics over K gives 
{I :m: s) = (pi(c, d) : p 2 {c, d) : ^ 3 ( 0 , d)) 

{I :m:t) = (gi( 0 ,V') : q 2 { 0 ,'ip) : 
where the p* and Qi are binary quadratic forms. Then 

( 11 ) pi(c,d) = ^ 3 gi( 6 ', V>) and p 2 (c, d) = 6 <? 2 ( 6 ', V’) 
for some .^3 G . 

Let L = K{^Jb/^l) and write f{l,m) = k{ 1 — em){l — em) where k ^ K and 
£ G T. Then 

k{pi - ep2){pi -ep2) = 6P3- 
Since pi and p 2 are coprime in K[c, d] it follows that 

pi(c, d) - ep 2 {c, d) = ^ 3 a(c + yd)^ 
for some 0,7 G L. Hence by (1TT]1 we have 

qi{9, - 0 ) - eq2{9, = a{c + yd)^ 

Parametrising a conic over L gives 

(d : : c + yd) = (Qi(A,/i) : Q 2 (A,/i) : Q 3 (A, p)) 

where Qi, Q 2 and Q 3 are binary quadratic forms. Then 

(12) 6 = ttQi{X,p) and i/j = TrQ 2 {X, p) 

for some it ^ . Let l,/3 be a basis for L over K. Writing X = x + jdy and 

p = u + (dv we expand to give 

7rQi(A,/i) = Fi{x,y,u,v) + l3F2{x,y,u,v) 

7 rQ 2 (A, p) = Gi(x, p, M, v) + (dG 2 {x, y, u, v) 

where Fi, F 2 , Gi and G 2 are quadratic forms with coefficients in K. Since d^'ip & K 
it follows by (|T^ that 

(13) F 2 {x, y, u, v) = G 2 (x, y, u, v) = 0. 

Up to linear changes of co-ordinates dehned over K, this quadric intersection de¬ 
pends only on the image of vr in L^/iL^(L^)^, and hence only on ,^4 := NLjKi'x) G 
. We may recover tt from ^4 by solving a conic over K. 

In the case iL is a number held, there are at each stage {j = 1,2, 3,4) only 
hnitely many G K^/{K^Y which the corresponding covering curves are 
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everywhere locally soluble. Thus each rational point on E lifts to one of only 
hnitely many quadric intersections flT5]l . 

The equations ([ 8 ]), (fTOj) . flTT|) . flT^ define covering curves Ci,..., C 4 that £t in 
a commutative diagram 


(14) 



where the vertical maps are isomorphisms dehned over K, and all other maps are 
morphisms of degree 2 dehned over K. Explicitly the Cj have equations: 

Cl = {r^ = + asH'^ + {h/ii)t^] = = f{l, m)g{l, m)}, 

1 g{l,m)=^ 2 C j 


C, = 


pi(c,d) = ^sqiiO^Tp) 

P 2 {c,d) = C3?2(^,'0) 


^4 = 


F2{x,y,u,v) = 0 
G2{x,y,u,v) = 0 


Each of these curves is either a double cover of , or a quadric intersection in P^. 


The pushout functions fj G K{Cj_i) are as follows. 


In each case Cj is K- 


birational to {fj{P) = C Cj^i x Gm- On E = Cq the pushout function is 

fi = X. On Cl the pushout function is /2 = f{l,m)/rn?. We may solve by linear 
algebra for a, /9 ,7 G so that 


Q;pi(c, d) + /9p2(c, d) + 7P3(c, d) = d^. 


Then C 2 has pushout function = {aqi{9,'ip) + (3q2{9,'ip) + Likewise we 

may solve for r, s, t G T so that 


rQi{X, fi) + sQ 2 {X, fi) + tQs{X, fi) — fi^. 


Let I = r9 + s'lfj + t{c + yd) and £ = rd + + t(c + yd), where the bars denotes 

the action of Gal(L/iL). Then O 3 has pushout function 

The formulae in this section can be used to compute Sm and S'^ for m < 4, by 
a method whose global part only requires that we solve conics over K, and over 
quadratic extensions of K. In Section [7] we extend to the case m = 5, and in 
Section M we replace the conics over quadratic extensions by quadric surfaces. 


6. Comparison with work of Bremner and Cassels 

The method used by Bremner and Cassels |BCj to End rational points of large 
height on E' : y"^ = x^x"^ + p), for p a prime with p = 5 (mod 8 ), is a special case 
of the method outlined in Section [5l We now explain the relationship. We have 
tried to keep their notation, although in one place we switched a, h to s, t, since 
we already used a, 6 in ([7]). 
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We start with the elliptic curve E : = x(x^ — 4p) over K = Q. The hrst stage 

of the argument in |BCj implicitly switches to this 2-isogenous curve. Then taking 
= p in ([ 8 ]) gives — At^. Since p = 5 (mod 8 ) we can write p = 

where u,v are odd integers with v = 1 (mod 4). A suitable parametrisation ([9]) is 
now given by 

/(/, m) = /^ + m? 

g{l, m) = vit^ — rn?) + ulm 

h{l, m) = — m^) — Avlm. 

A local argument suggests taking ^2 = 1- Then (fT 0 |) becomes + rn? = and 
v{P —rn^) +ulm = t^. The hrst of these conics is parametrised by pi(c, d) = (? — d?, 
P 2 (c, d) = 2 cd, P 3 {c, d) = c^ + d?, and the second by qi{6, q 2 { 0 , 'ip), q^iO, p)) (say). 

If the qi are suitably scaled then by local considerations it suffices to take ^3 = 1 . 
Then ffTTl) becomes qi{9,'ip) = — d"^ and q2{0,'ip) = 2cd, equivalently 

(15) ql{9,^jJ) + iq2{0,^jJ) = {c +idf. 

Parametrising a conic over L = Q{i) gives 

{9 : ip : c + id) = (Qi(A, p) : Q 2 (A, p) : QsiK p))- 

Then 9 = 7 rQi(A, p) and ip = 7 rQ 2 (A, p) for some tt G Q(?). A suitable value of vr is 
determined by local considerations. Finally the procedure described in Section [5] 
(with fd = i) furnishes a quadric intersection 

(16) F 2 {x, y, u, v) = G 2 {x, y, u, v) = 0 . 
dehned over Q. 

In summary, the examples of Bremner and Cassels are special in that, (i) some 
of the conics can be parametrised “for free” and so do not appear explicitly in 
their argument, (ii) the conics we do have to solve are dehned over either Q or 
Q{i), and (iii) by local considerations only one choice of G Q^/(Q^)^ need be 
considered at each stage (j = 1,2, 3,4). 

Bremner and Cassels give a worked example in the case p = 877. We record a 
few brief details. Firstly they take u = 29, v = —3 and 

gi(6*, ip) = —36*^ + 69ip — 2ip‘^ 

92 ( 9 , ip) = —76*^ — A9ip — ip"^ 

q^i9,ip) = 276 *^ — 116 *-^ — 7ip‘^. 

Then the conic f[T5]l is parametrised by 

Qi(A, p) = (-4 - 3i)\‘^ + (10 - 22i)\p + (29 + 6 i)p^ 

Q 2 (A, p) = (-1 + 2 i)X^ + (-16 - 6 i)Ap + (6 - 29i)i/ 

Q 3 (A, p) = (-15 + 6 i)X^ + (-46 - 70i)Ap + (76 - 75i)p^ 
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(18) 


By local considerations it suffices to take vr = 1 + i. This leads to a quadric 
intersection fflB]) . Minimising and reducing, as described in |CFSj . suggests making 
the transformation 

X = Xi+ 2X2 — 4x3 — 6 X 4 , U = —Xi — 2X3 + 2X4, 

(17) 

y = 2 xi — X 2 + Qxs — 4x4, v = X 2 — 2 x 3 — 2 x 4 
whereupon ffT6|) becomes 

X1X2 + X1X3 + X1X4 — X2X3 + X2X4 + X3 — 2x3X4 — X4 = 0 

xl — AxiX 2 + 8 X 1 X 3 + X 1 X 4 — X 2 — X 2 X 3 + 8 X 2 X 4 + 4 X 3 X 4 = 0. 

A little searching hnds the rational points 

(xi : X 2 : X 3 : X 4 ) = (-2 : 57 : 85 : 16), (57 : 2 : -16 : 85). 

We substitute in flTT)) to recover the solutions 

{x:y:u:v) = (824 : -885 : 186 : 145), (885 : 824 : -145 : 186) 

found by Bremner and Cassels. These points map down to the same point of 
inhnite order P = {xp,yp) on E{Q). The co-ordinates of P are 

xp = -292214148680270491286/4612160965^ 

yp = 20949922565086852416107761007588/4612160965^ 

The point recorded in |BCj is the image of P under the 2-isogeny (p : E ^ E', and 
accordingly has (canonical) height twice that of P. 

The general implementation of 4-descent in Magma (due to Womack |Wo] and 
Watkins) is able to hnd the 4-covering fflSj) in a couple of seconds. However the 
method it uses involves computing the class group and units of a degree 4 number 
held; in this case Q(\/6 — 29i). In contrast the method of Bremner and Cassels 
only requires that we solve conics over Q and Q{i). 


7. Computing pushout forms 

Let C C be a non-singular quadric intersection. The 4 singular hbres in the 
pencil of quadrics dehning C are cones over conics ri,...,r 4 . Projecting from 
the vertex of each cone gives a degree-2 morphism i/j : C —?■ Tj with hbre a*. By 
considering the tangent plane at a smooth point on the cone over Tj we see that 
2aj ~ H where H is the hyperplane section on C. Therefore the differences o* — aj 
represent elements of order 2 in Pic°(C'). 

Let E be the Jacobian of C. By the previous paragraph {Pi,..., r4} is a torsor 
under E[2]. In particular, there is a Galois equivariant bijection between i7[2] \{0} 
and the partitions of the singular hbres into 2 sets of 2. We are interested in elliptic 
curves with a rational 2-torsion point. We therefore hx 0 7 ^ T G E{K)[2], and 
order the Pj so that T corresponds to the partition (Pi, P2; P3, P4). In other words 
ai — 02 ~ 03 — 04 represents the class of T in Pic°(C') = E. 
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Let p : Ga[{K/K) —)■ 6*4 describe the action of Galois on the Lj. Since T is 
/L-rational we have Ini(p) C ((1324), (12)). We now make the assumption that 

(19) Im(rtc((12),(34)). 

We distinguish two possibilities. 

• (split case) The conics Ti and r 2 are dehned over K. 

• (non-split case) The conics T 1 and T 2 are dehned over a quadratic extension 
L/K, and are Gal(L/iL)-conjugates. 

Let T = Ti X r 2 , respectively Res^/xTi. If C/K is everywhere locally soluble 
then by the Hasse Principle for conics, we have T{K) 7 ^ 0. A point P G r(iL) 
corresponds to a pair of points Pi G Ti and P 2 G r 2 which are either dehned 
over K or are Gal(L/iL)-conjugates. The tangent planes to Pi and P 2 , as points 
on the cones over Ti and r 2 , are dehned by linear forms ii and £ 2 - In the split 
case these are dehned over K. In the non-split case we may arrange that they are 
Gal(L/iL)-conjugates. 

We say that a quadratic form / G K[xi,... is a pushout form on C if 
f/xf G K{C) is a pushout function, i.e. div(//a;^) = 2b for some divisor b 
representing the class of T in Pic'^(G) = E. 

Lemma 7.1. / = ^iG G K[xi,... ,xf\ is a pushout form on C. 

Proof: We have div(//a;^) = 2(ai -I- a 2 — P) and ai -I- 02 — P ~ ai — a 2 . □ 

Let / = f'lG as above and let tt : P —)■ G be the degree-2 covering with 
K{D) = K{C){\/y). In other words D is the smooth curve of genus one K- 
birational to {/(P) = C G x Gm- We now show how to write P as a quadric 
intersection with hyperplane section 7r*ai ~ 71 * 02 . 

We suppose we are in the non-split case, the split case being similar. The 
conic Pi is dehned by a quadratic form q G L[X,Y,Z], and the cone above Pi 
has equation g(mi,m 2 ,m 3 ) = 0 for some linear forms mi,m 2 ,m 3 G L[xi,... jX^]. 
Since we have found an L-rational point on Pi, we may parametrise this conic, 
say 

{X-.Y-.Z) = (Qi(A,/i) : Q 2 {X,p) : QsiX, p)) 
where Qi, Q 2 and Q 3 are binary quadratic forms dehned over L. If L = P(/5) this 
gives equations 

(20) mi{xi,... ,X 4 ) = Qi{x +/3y,u +/3v) 

for i = 1,2,3. Writing each side in terms of the basis l,/9 for L over K we 
get 6 equations with coefficients in K. The left hand sides are linear forms in 
Ti,... , 0)4 and the right hand sides are quadratic forms in x,y,u,v. By taking 
linear combinations we obtain equations 

F{x, y, M, v) = G(x, y, u,v) = 0 

and Xi = ri{x, y, m, n) for i = 1,..., 4. 
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Theorem 7 . 2 . The curve D = {F = G = 0 } <Z is a non-singular quadric 
intersection, and the map tt = {ri r^) ■. D ^ C is a morphism of degree 2 . 

Moreover D has hyperplane section Mai ~ Ma2- 


Proof: For the proof we are free to extend our field K and to make changes of 
co-ordinates. So we may suppose 


( 21 ) 


C 


g{l,m) = J 


C Pi 


We parametrise the conics f{l,m) = and g{l,m) = t^ as 
{l:m: s) = (pi(c, d) : p2{c, d) : p^{c, d)), 
{l:m:t) = (gi( 0 ,V') : ^2(^,1’) : 


Then by the above construction (in the split case) we have 


(23) 


rpi(c,d) = gi(0,V^)l 
\p2{c,d) = g2(^,'0)i ^ 


If a quadric intersection is given by 4 x 4 symmetric matrices A and B, then we 
may associate to it the binary quartic F{x, y) = det(24x -|- By). To prove that the 
quadric intersection is non-singular it suffices to show that F has distinct roots 
in P^. We write A for the discriminant of a binary quadratic form. Since the 
linear combinations of pi and p 2 that are perfect squares can be computed from 
the roots of /, we have 


A(mpi — lp2) = Kf{l,m) 
A{mqi — lq2) = n!g{l,m) 


for some k,k' G . Therefore the binary quartic associated to H is a scalar 
multiple of f{l,m)g{l,m). Since C dehned by (!?!]) is non-singular, it now follows 
that D dehned by fl25D is non-singular. 

The morphism vr : H —)■ C is given by 

{I :m: s :t) = {pi{c,d) : P2{,c,d) : Pz{c,d) : qzi.O^'ij])). 

It is easy to see that tt has degree 2 with hbres of the form {(c : d : 6* : V’)) (c : 
d : —9 : —'0)}. Moreover if ai = (/ : m : s : f) -f (/ : m : s : —t) then 7r*ai is the 
hyperplane section given by solving the hrst equation in fl2^ for (c : d). Likewise 
ii a 2 = {I '■ m ■. s ■. t) + {I ■. m ■. —s ■. t) then 7r*a2 is the hyperplane section given by 
solving the second equation in fl2^ for {6 : ip). □ 

Let (j) : E ^ E' he the 2-isogeny with kernel {0,T}. Let cp : E' ^ E he the 
dual isogeny, say with kernel {0,T'}. 
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Theorem 7 . 3 . The degree-2 covering : D ^ C constructed in Theorem \7.^ is 
a cj)-covering, i.e. there is a commutative diagram 




where the vertical maps are isomorphisms defined over K. 

Proof: We give details in the non-split case. Recall that Pi is parametrised 
by binary qnadratic forms Qi,Q 2 ,Q 3 - We solve for r, s,t so that r(5i(A,/i) -|- 
s(52(A, p) + tQfiX, p) = p^. We then take / = £ 1^2 where £1 = rmi -\- sm 2 + tm^ 
and £2 is its Gal(L/iP)-conjngate. By fl20|) we have 

G(ti, ... ,xa) = {u + fivf 

£ 2 ( 2 : 1 ,... , 0 : 4 ) = {u + fivf 

Then t = {u-\- /3v){u -\- fiv) G K[x, y, u, n] is a qnadratic form with 
(24) /(n,... ,r 4 ) = mod/(T>). 

Therefore TT*{f/x\) is the sqnare of a rational fnnction in K{D). Since / is a 
pushont form (corresponding to T), the resnlt follows. □ 

The pushont form / G K[xi,... ^xfi\ and quadric intersection D C were 
constructed from a pair of points on Pi and P 2 . We may equally construct a 
pushont form /i G K[xi, ..., 0:4] and quadric intersection C P^ from a pair of 
points on P3 and P4. We have (TiY{f/x\) = 2b and (Tiv{fyxl) = 2h^ with b ~ bi 
representing the class of T in Pic°(G) = E. Therefore ///i = ch? for some cE K 
and h G K{C). Scaling / and /i appropriately we may assume c = 1. The quadric 
intersections D and are now isomorphic as curves (indeed as (/)-coverings of C) 
but have different hyperplane sections H and HX 

Theorem 7.4. The divisor El — represents the class ofT' in Pic°(P)) ^ E'. 

Proof: Let tt \ D ^ C he the degree-2 covering as above. By Theorem 17.21 we 
have 

H ~ 7 r*ai ~ 7 r*a 2 and ~ 7 r*a 3 ~ 7 r*a 4 . 

Let E[2] = {0, T, Ri, S' 2 } with ai — 03 representing the class of Si in Pic°(G) = E. 
By Theorem 17.31 there is a commutative diagram 

Pic°(G) ^^Pic°(D) 


Then iP — ipl ~ 7 r*(ai — 03 ) represents the class of fiSi = T' in Pic°(iP) = E'. □ 
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We will need explicit equations for the isomorphism between the quadric inter¬ 
sections D and We compute these as follows. The 2-uple embedding D C 
is dehned by 8 quadratic forms, chosen so that together with the equations for D 
they give a basis for the space of all quadratic forms on P^. Since 2H ~ the 
2-uple embeddings of D and are related by a change of co-ordinates on P^. We 
now explain how to choose 8 quadratic forms for D in a particular way, so that 
when we repeat for D\ the change of co-ordinates needed on P^ is trivial. 

Since tt : D —)■ C is a degree -2 Galois covering, the 8 quadratic forms may 
be given as 4 “even” forms ri,...,r 4 and 4 “odd” forms Si,...,S 4 . The even 
forms ri,..., r 4 are those giving the morphism n : D ^ C in Theorem 17.21 The 
quadratic form t computed in (124]) is an example of an odd form. Further odd 
forms may be computed as follows. 

Once we have found one pushout form / on G, it is easy to hnd more by 
computing Riemann-Roch spaces. (With the rehnements in Section [9] it turns out 
that we have this information anyway.) Let fi be another pushout form, scaled so 
that ffi = hf mod I{C) for some quadratic form hi. Since 'K*{fi/x\) is a square 
in K{D), and D is projectively normal, there is a quadratic form s* such that 

(25) /i(ri,... ,r 4 ) = mod/(T>). 

It follows by (1241) and (1251) that if we scale the forms Sj appropriately then 

hi{ri,... ,ri) = Sit mod I{D). 

We use this last equation to solve for Sj by linear algebra. Repeating for pushout 
forms fi,f 4 gives odd forms Si,..., S 4 are required. 

We now have quadric intersections D C P^ and C P^ and an isomorphism 
between their 2-uple embeddings, given by a change of co-ordinates on P^. We 
say that D and are companion quadric intersections. Theorem 17.41 shows that, 
under this change of co-ordinates, the square of a linear form on corresponds 
to a pushout form on D. This is exactly what we need for the next stage of the 
descent. ^ 

The results of this section may be applied as follows. Let G 3 be the 20-covering 
of E considered in Section IS Then C 3 satishes the Galois hypothesis (1T2D . So we 
may construct a 0-covering of C 3 (and hence a 4-covering over E) in the form of 
companion quadric intersections C 4 and C\. The construction of C 4 was already 
described in Section I5l However the advantage of also computing G|, is that the 
square of a linear form on C\ corresponds to a pushout form on C 4 . We can 
then compute the pairing ©4 : 5*4 x 5*4 —>■ F 2 in Theorem 12.11 In conclusion, we 
can compute Sm and for m < 5 by a method whose global part only involves 
solving conics over K, and over quadratic extensions of K. 
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8. Extension to 8-descent 
Suppose that E has full rational 2-torsion, say 

E{K)[2] = {0,T,,T2,Ts}. 

Let C C be an everywhere locally soluble 4-covering of E. Repeating the 
method of Section [7] three times, gives pushout forms /* G K[xi,... ,X 4 \ on C 
with div(/j/a:^) = 2bi where bj represents the class of Tj in Pic°(C) = E. The 
rational functions fi/x^ are now exactly those required to compute the Cassels- 
Tate pairing 

S^^\E/K) X S^^\E/K) Q/Z 

following Swinnerton-Dyer’s generalisation IHEl of the method of Cassels ra. 
This allows us to compute the pairing ©5 : Sg x Sg —)■ F 2 and hence its kernel S'^. 
By Lemma 12.21 the upper bound 

rank E{K) < dim Rg -|- dim S'^ — 2 

is the same as that obtained by 8 -descent on E. 

The following lemma, which we state and prove using the notation and conven¬ 
tions of Section 01 describes the necessary bookkeeping. 

Lemma 8.1. Let ai, (3i G S' 5 . Suppose a^, 13^ G Sel(4) and (32 G Sel(2) with 
04 t—)■ «! and (3^^ ( 32 ^ (di- Then 

(i) There exists ^ E S 3 with rj) 4- {(3^^ h) = 0 V ^ S 3 . 

(ii) For any ^ satisfying (i) we have 

(26) 05 (<^l,/^i) = ( 04 , -f-/32)- 

Proof: Let ( 3 ^ G Sel(5) with ( 3 ^ hg- ( di . The images of ( 3 ^ in Sel(4) and Sel(2) are 
f + /34 and i + (32 for some f G Sel(3) and f G Sel(l) with 1 —)■ Then ^ E S 3 
and for any rj E S 3 we have 

03 (^, v) + Wi, v) = + A, v) = 0. 

Moreover © 5 ( 0 : 1 ,/3i) = {ai, (df) = (o 4 ,(^ -1- (32). To complete the proof we must 
show that if we replace by -f 71 for some 71 G 5*4 then the formula fl 26 |l is 
unchanged. However if 74 G Sel(4) with 74 1 —)■ 71 then (04,71) = (01,74) = 0 
where for the second equality we use that Oi G S' 5 . □ 

9. Restriction of scalars 

Our methods so far rely on being able to solve conics over K, and over quadratic 
extensions of K. In this section we show how to replace the latter problem with 
that of solving a quadric surface over K. This is to our advantage since, in the 
case iL = Q, there is a particularly efficient method due to D. Simon |S2j for 
solving rank 4 quadratic forms. 
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Let Li be a conic defined over a quadratic extension LjK. The restriction of 
scalars T = Res^/i^Ti is a degree 8 del Pezzo surface in Res^/z^'P^ C P®. Alter¬ 
natively, by passing to an affine piece first, one gets that P is birational to an 
intersection of two quadrics in P'^ with 4 singular points at infinity. We show 
however that for the conics arising in our descent calculations, we can write P as 
a quadric surface in P^. 

Let i?/A be an elliptic curve with a fixed rational 2-torsion point T. Suppose C 
and (Pl are companion quadric intersections with respect to T. By this we mean 
that C and are isomorphic as curves, but the difference of their hyperplane 
sections represents T in Pic°(C) = E. Let Pi,..., P 4 be the conics associated to 
C, ordered as specified at the start of Section [71 Suppose we are in the non-split 
case, i.e. Pi and P 2 are Gal(L/A)-conjugates. Let P = ResL/i^Pi- As described 
in Lemma 17.11 each P G P gives rise to a pushout form on C. Since C and (Pl 
are companion quadric intersections, this in turn corresponds to a linear form on 
(Ph There is therefore a natural map P —?• (P^)^ where (P^)^ is the dual of the 
ambient space for (PP 

If {Q = 0} C P^ is a non-singular quadric surface then mapping each point to 
its tangent plane gives the dual quadric surface {Q' = 0} C (P^)^. The symmetric 
matrix representing Q' is the inverse of that representing Q. 

Theorem 9.1. The image o/P —?• (P^)^ is a non-singular guadric surface, and is 
dual to one of the guadrics in the pencil defining (PP 


Proof: For the proof we are free to extend our field K and make changes of 
co-ordinates. We may therefore suppose that C and (Pf are the images of E : 

= x{x^ ax + h) under the linear systems |4.0| and |3.0 -|- T| where T = (0, 0). 
Explicitly 

Xi = x\ 

xl = X2{xi + ax2 + hxi) 

is the image of E under {x\ : X 2 '■ X 3 : x^) = {1 ■. x ■. y ■. x^), and 




(27) 


(P^ 


X1X3 = X2X4 

X 3 X 4 = x\ + 0 x 4 X 2 + hx\ 


C P^ 


is the image of E under (xi : X2 : X3 : X4) = (1 : x : ?/ : y/x). 

Let Pi = (oi : 02 : 0 : 04 ) and P 2 = {0 : (32 ■ Ps ■ (^a) be points on the rank 3 
quadrics defining C. The tangent planes at these points are defined by linear 
forms 


ii — 04 X 1 — 202 X 2 T 01 X 4 , 

£2 = {I 3 a + a( 32 )x 2 + ( 32 {xa -f 0x2 hxi) - 2(33X3. 
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Using the relations aia 4 = al and = (32{I3a + 0 / 52 ) we find that 
a 4 /? 2 ^i(l, T, y, X, y, x'^) = m(l, x, y, y/xfx 

in K{E), where 

m(xi,..., X4) = 0/4/33X1 - Q/2/33X2 + a2f32X3 - 0/4/32X4. 

The map T ^ (P^)^ is therefore given by 

(Pi,P2) t (0/4/33 : —0/2/33 : 0 / 2/32 : —0/4/32). 

The image of this map has equation yiy^ = 1 / 2 I/ 4 . This is dual to the first of the 
quadrics in flTT)) . □ 


Remark 9.2. The binary quartic associated to defines a double cover of 
again with Jacobian E. Translation by the 2-torsion point T induces an involution 
of P^. The quadric in the pencil defining arising in Theorem 19.11 corresponds 
to one of the fixed points of this involution. (The other fixed point corresponds 
to the quadric that arises when we try to solve r 3 and r 4 .) This may be seen by 
inspection of the above proof. Indeed the binary quartic associated to (l27)) is 

P(m, v) = + 2au^v^ -I- (a^ — Ah)v‘^ 

and the involution induced by translation by T is (m : x) 1 —)■ (m : —x). The fixed 
point (x : x) = (1 : 0 ) then corresponds to the first of the quadrics in fl^TI) . 


Solving the quadric surface in Theorem 19.11 gives a linear form on Ch Suppose 
we know the change of co-ordinates relating the 2-uple embeddings of C and Cfi 
This then converts the square of our linear form on to a pushout form / on C. 
We write Cr\{f = 0} = 2b where b is a degree 4 effective divisor. By construction, 
the push-forward of b via ui : C ^ Ti contains an P-rational point in its support. 
We can then solve for Pi G Ti (L) as required. 

To make use of the above refinements, we must arrange that at each stage of 
the descent, our covering curve is represented by a pair of companion quadric 
intersections, and that we know the change of co-ordinates on P^ relating their 
2-uple embeddings. 

Let C : y‘^ = f{l,m)g{l,m) be the (//-covering of E we called Pi in Section O 
Then P is a double cover of P^ with fibre P and ramification points Pi,. .., P4, say 
with Pi, P 2 corresponding to the roots of /, and P3, P4 corresponding to the roots 
of g. We have 2 Pj ~ P and Pi -|- P 2 -|- P3 -|- P4 ~ 2P. Moreover Pi — P 2 ~ P3 — P4 
represents the class of T' in Pic°(P) = E'. We now let Pi and C\ be the images 
of P under the linear systems |2P| and |P -|- Pi -|- P 2 I. Explicitly 


Pi = 


X1X3 = xl 

xl = iix\ + 0 X 1 X 3 + {h/^i)xl 


C P^ 
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is the image of C under {xi : X2 '■ X3 : X4) = : y : g{l,m) : h{l,m)), and 

r X1X4 = X2X3 ] 

^ [f{xi,X2)=g{x3,X4))^^ 

is the image of C under 

{xi : X 2 : X 3 : X 4 ) = {yl : ym : : f{l,m)m) 

= {g{l,m)l : g{l,m)m : yl : ym). 

It is straightforward to work out the change of co-ordinates relating the 2-uple 
embeddings of Ci and C\. 

Starting with Ci and C\ we apply our method to compute a 0-covering of Ci 
(and hence a 2-covering of E) in the form of companion quadric intersections 
C 2 and C\. The curve C 2 is the same as that in Section |5l and as there it is 
computed by solving conics over K. To compute C\ we must solve the quadric 
surface f{xi,X 2 ) = g{x 3 , X 4 ) that appears as the second equation for C\. Since we 
already solved the conics f{l,m) = ^ 2 ^^ and g{l,m) = ^ 2 ^^ in Section [5l we can 
read off a solution “for free”. 

At the next stage we compute a 0-covering of C 2 (and hence a 20-covering of 
E) in the form of companion quadric intersections C 3 and C 3 . The curve C 3 is 
the same as that in Section 0 and as there it is computed by solving conics over 
K. However to compute C\ we must solve a quadric surface over K. In the hnal 
stage, we compute a 0-covering of C 3 (and hence a 4-covering of E) in the form 
of companion quadric intersections C 4 and C|. To compute each of these we must 
solve a quadric surface over K. 

This is the limit of our method since C 4 does not satisfy the Galois hypothe¬ 
sis (IT^ . Indeed the singular hbres in the pencil dehning C 4 are in general dehned 
over a degree 4 extension of K. Solving a conic over a degree 4 number held is 
not practical for the examples we have in mind. However if we could solve such 
conics, then we could compute a 2-covering of C 4 (and hence an 8 -covering on E) 
as described in [St] . 


10. Examples 

We have written a program in Magma [BCPj for performing the higher descents 
described in this paper, for elliptic curves over Q with a rational 2-torsion point. 
The Magma functions we use for solving quadratic forms of ranks 3 and 4 over Q 
are based on [ST] , [S2] . See also EE] for the rank 3 case. Our program is available 
in Magma (version 2.21) as the function TwoPowerlsogenyDescentRankBound. 

We have used our program to help search for curves of large rank in certain 
families of elliptic curves. For example, we found the hrst example of an elliptic 
curve E/Q with E{Q) = Z/12Z x Z"^. We also found 10 new examples of elliptic 
curves E/Q with E{Q) = Z/2Z x Z/8Z x Z^, including one where every point of 
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infinite order has canonical height greater than 100. These examples are listed on 
Dujella’s website m- We have also contributed to a project run by Mark Watkins 
|w±i, searching for congruent number elliptic curves of large rank. 

The main reason we need higher descents for these searches is that we would 
otherwise be swamped by examples which, while appearing to be candidates for 
large rank, turn out instead to have large 2-primary part of III. The examples 
we have chosen to present in this section are therefore elliptic curves which our 
program was quickly able to show do not have large rank. 

We do not give details of every step in computing the covering curves and 
pushout functions. However the answers may be checked as follows. Each of our 
covering curves is either a double cover of P^, with equation y'^ = g{x, z) where g is 
a binary quartic, or a quadric intersection in P^. In both cases classical invariant 
theory gives a formula for the Jacobian. In the second case, we may represent 
the quadric intersection C 4 C P^ by a pair of 4 x 4 symmetric matrices A and 
B. Then C 4 is a 2-covering of = g{x,z) where g{x,y) = det(y4a; -f By). At 
each stage our program makes changes of co-ordinates to simplify the equations 
for these covering curves, using the algorithms in |CFSj . In checking the examples, 
it is useful to note that there are algorithms implemented in Magma for testing 
equivalence of binary quartics (see CEI) and quadric intersections (see |F2jj. 

The pushout functions on y"^ = g{x, z) take the form / = {y — X 2 {x, z))/z"^ where 
A 2 is a binary quadratic form. The pushout functions on a quadric intersection 
take the form / = A 4 (xi,..., X4)/x\ where A 4 is a quadratic form. We say that y — 
X2{x, z) and A 4 (a:i,... , X4) are pushout forms. There are several ways of checking 
that div(/) = 2b for some divisor b. For example in Magma one could compute 
resultants, or use Groebner bases, or use the function field machinery. If / is 
not a constant times the square of a rational function, and the Jacobian has only 
one rational 2-torsion point T, then such a calculation proves that / is a pushout 
function corresponding to T. 

Example 10.1. Let E/Q be the elliptic curve y^ = x{x‘^ + ax + b) where 

a = 91502230365284038, 
b = 489792722057841784540058275212361. 

This is an example with i7(Q)tors — Z/12Z. There is a 2-isogeny (j) : E ^ E' 
where E' has equation y"^ = x{x‘^ + a'x J- b') and a' = —2a, b' = — 46. With 

notation as in Section [21 we hnd that 

3 ^ = 82 = 83 = (15,73,87,231,28619) C Q^/(Q^)^ 

S'^ = S'^ = 3 '^ = (-272196179) C QV(Q^)^ 

Therefore ranki7(Q) < 4. To improve this upper bound for the rank we compute 
the pairing ©3 : S '3 x S '3 —)■ F 2 . 
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Let = 15 X 44660^. Parametrising a conic, we find binary quadratic forms 
/(/, m) = 195346817865/2 - 490516840068/m + 33576198052m2, 
g{l,m) = -1473071/2 + 7386682/m - 9255011m2, 
h{l,m) = 348523798338106(2067/2 - 10091/m + 12314m2) 

satisfying + a'fg + {b'/^i)g‘^ = Parametrising two further conics, gives 
binary quadratic forms 

Pi{c, d) = 65928c 2 + 582550cc/ + 1159554c/2, 
j 92 (c, d) = 13590c 2 + 429375cc/ - 202059c/2, 
j93(c, d) = 8585676(2375c2 - 6774cc/ - 71700d^) 


satisfying f{pi,P 2 ) 


qi{9, ij) = 81902 + 17179^1; + 3725 ^ 7 ^ 
q^(9, = 32902 + 7179^; + 1510^2^ 

g3(0, = 11165(202 + 29ij - 7^7^) 

pI and g{qi, q 2 ) = ql- It may then be checked that the curve 


C's 


Pi(c,d) = gi( 0 ,V ')1 

> C P 

P 2 {c,d) = g2(0,'0)J 


is everywhere locally soluble. This confirms that G S' 3 . (For the purposes of 
presenting this example, we adjusted the parametrisations so that ^ = ^3 = 1 .) 

By computing companion quadric intersections C] and Cl as described in Sec¬ 
tion m we find that C 3 has pushout form 


A(c, c/, 0, i)) = 522272234c2 - 24659265cc/ - 1739845002 

- 264175102 - 55245590^7 - 9670688i72. 


Let p G S' 3 . By the formula for the Cassels-Tate pairing in Section |3l we have 
© 3 (^ 1 ,h) = Y.viKPv),9)v where G 6 * 3 ( 0 ^) and ( , is the Hilbert norm 
residue symbol Q^/(Q^)2 x Q((/(Q(()2 ^ F 2 . The bad primes of E are 

5 = {2, 3, 5, 7,11, 29, 71, 73,127, 28619, 30187}. 


At all primes p ^ S, we hnd that C3 has good reduction mod p, whereas the 
two equations for C3 together with A are linearly independent mod p. These 
primes therefore make no contribution to the pairing. Since g G (Q.^)2 for all 
V G {71,127, 30187, 00 } there is also no contribution from these places. At each 
of the remaining primes p we find a local point P G 6*3 (Qp) with F{P) = Up 
mod (Qp )2 where M 2 = 5 and Up is a quadratic non-residue for p odd. Therefore 
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©3(^1)^) = ^iv) (mod 2) where u{ri) is the number of prime divisors of r]. (We 
choose a representative modulo squares so that is a square-free integer.) This 
gives the hrst row in the following table. Repeating for running over a basis for 
S's we find that ©3 : S's x S's —?• F2 is given by 



15 

73 

87 

231 

28619 

15 

0 

1 

0 

1 

1 

73 

1 

0 

1 

0 

0 

87 

0 

1 

0 

0 

1 

231 

1 

0 

0 

0 

1 

28619 

1 

0 

1 

1 

0 


This matrix has rank 4. Therefore dim 5*4 = 1 and ranki?(Q) = 0. By Remark 12.31 
the 2-primary parts of lII(i?/Q) and lII(i?YQ) are (Z/dZ)"^ and (Z/2Z)‘^. 

Example 10.2. Let E/Qhe the elliptic curve y‘^ = x{x^ + ax + h) where 
a = -802175537664068731998722, 

b = 160480561352940413879437222902216664489852408321. 

This is an example with E(Q)tors — Z/2Z x Z/8Z. Let (j) : E ^ E' he the 2- 
isogeny with kernel generated by T = (0,0). As subgroups of Q^/(Q^)^ we hnd 
that Si = S 2 = (—10,5574) and 

S[ = (3841,920641,262404961,289572953761,9289,6049,31441), 

^2 = (3841,920641,262404961,289572953761,9289). 

Therefore rankE(Q) < 5. Next we compute ©2 : 5*2 x S'2 —)■ F2. The elements 
= —10 and rji = 5574 in Si = lift to 2 -coverings of E' given by 

C 2 = {y‘^ = \i{x, zf + 10/ii(a;, zf)} 

D 2 = { 1 /^ = A 2 (a;, zf - 5574p2(t, zf] 

where 

\i{x,z) = 341696479062308(t^ - lOz^) + 3516978476959251a;x, 
fxi{x,z) = 21538029761160(a;2 - lOz^) + 158658854157270a;z, 

X2{x,z) = 1335842866662(a;^ -1- 5574^^ + 1439937420103543a;x, 
fX 2 {x,z) = 17631567180(a;2 + 5574^^) + 18855731460270a;z. 

It may be checked, using the formulae in [CFj . that C 2 and D 2 do indeed corre¬ 
spond to .^1 and rji- Since C 2 and D 2 are everywhere locally soluble, this conhrms 
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that and are in S' 2 . Now y — Ai(x, z) and y — \ 2 {x, z) are pnshont forms on 
C 2 and V 2 . Evalnating these at local points, and then compnting sums of Hilbert 
norm residue symbols, we hnd that ©2 : 5*2 x S '2 —)■ F 2 is given by 



3841 

920641 

262404961 

289572953761 

9289 

-10 

0 

0 

0 

0 

1 

5574 

0 

0 

0 

0 

0 


We further hnd that ©3 and ©3 are identically zero. Therefore S 3 = S 4 = (5574) 
and 

^' = S'; = (3841,920641,262404961,289572953761). 

Using the methods in Sections [7] and [9] we compute an everywhere locally soluble 
2-covering D 4 of D 2 (and hence 4-covering of E') with equations 

9055x^ -f- 139619x1X2 + 394387xiX3 -|- 47027xiX4 — 94269x2 

- 234422 x 2 X 3 + 266438X2X4 + 127750x^ - 130775x3X4 - 137150x; = 0, 
255171x^ - 961185X1X2 + 297383xiX3 + 224191xiX4 + 152028x^ 

+ 461745x2X3 - 59967x2X4 + 370158x^ - 350350x3X4 - 198938x^ = 0. 

We hnd that D 4 has pnshont form 

A = 2471492850764286X? - 573148078730175xiX2 + 136617115364660xiX3 

- 1043769539460119X1X4 - 338965008210675x^ + 46036721190885x2X3 
+ 1057225484721135X2X4 - 989678424716819x^ + 2171876872481818x3X4 

- 1169960121148148x;. 

Using this we compute that ©4 : S 4 x S; —)■ F 2 is given by 



3841 

920641 

262404961 

289572953761 

5574 

1 

1 

0 

1 


Therefore S '5 = 0, dimS; = 3 and ranki7(Q) < 1. If ranki7(Q) = 1 then by 
Remark 123] the 2-primary parts of in(i7/Q) and in(i7YQ) are (Z/2Z)^ x (Z/4Z)^ 
and (Z/2Z)^ x {Z/AZf. 

Example 10.3. Let E/Q be the elliptic curve y^ = — d?x where 


d = 743114132612994 = 2 x 3 x 19 x 953 x 1427 x 2137 x 2243. 

This was one of the candidates in |W-|-| for a congruent number elliptic curve of 
rank 6 . Let (p : E ^ E' he the 2-isogeny with kernel generated by T = (—<7,0). 
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We find that 

= ^2 = ^3 = ^4 = (1906,2137) C QV(Q")^ 

= (2,57,953,2137,4281,6729) C Q^/(Q^)^. 

Therefore ranki7(Q) < 6. (We note that 1906 = 2 x 953, 57 = 3 x 19, 4281 = 
3 X 1427 and 6729 = 3 x 2243.) The elements 1906 and 2137 in lift to 

4-coverings of B' with equations 

1188a;^ -|- 1244a;ia;2 + 732a;ia;3 -|- 5599a;ia;4 — 1530x2 

— 3687x2X3 -|- 2824x2X4 — 2928x3 -|- I78OX3X4 -f 4886x4 = 0) 

3298x4 — 7382xiX2 + 3881xiX3 — 3470xiX4 -|- 20x2 

-I- 2136x2X3 -I- 7147x2X4 -I- 1517x3 — 4464x3X4 — 2455x4 = 0) 

and 

68x4 -I- 416x4X2 + 422x4X3 + 1372x4X4 -f 401x2 

-i- 1146x2x3 -i- 1154x2x4 -i- 475x3 + 1528x3X4 — 2366x4 = 0 ) 

18869x4 “ 13870xiX2 — 14599xiX3 — 2402xiX4 -|- 2322x2 

-|- 15142x2X3 — 1629x2X4 — 12250x3 + 6366x3X4 -|- 4913x4 = 0. 

These have pushout forms 

A = 280117153304X? + 627376555572x4X2 - 534852420548x4X3 

- 24376482389X1X4 + 7830950834x^ - 165910883299x2X3 

+ 255303594426x2X4 - 574956757207x^ - 923597568302x3X4 

- 398161865115x^, 

and 

A = 302992919x^ + 165225436x4X2 - 554084592x4X3 - 3000363446x4X4 
+ 259816709x^ - 1891629098x2X3 + 2507867060x2X4 - 1337797147x^ 

+ 572269312x3X4 - 1348920925x^. 


Using these we compute that ©4 

:^4 

X 

F 2 is 

given by 


2 

57 

953 

2137 

4281 

6729 

1906 

0 

1 

1 

0 

0 

0 

2137 

0 

0 

1 

0 

1 

0 
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This matrix has rank 2. Therefore S '5 = 0, dimS '5 = 4 and ranki?(Q) < 2. 
Searching for rational points on 2-coverings of E, and on 2-coverings of elliptic 
cnrves isogenons to E, we hnd that -E(Q) has independent points of inhnite order 

Pi = (378998487378128086417/422, 7378254260469086949865651299481/42^), 

P 2 = (4906543485739785817699690091987274941361019066993/76947716/ 
4003016122,480965296472375270212047079501479961953600924/ 
7328327459226000929166668023/76947716400301612^). 

Therefore rankii^(Q) = 2. By Remark 12.31 the 2-primary parts of III(T^/Q) and 
III(£^YQ) are isomorphic to (Z/dZ)"^. Similar calcnlations show that the other 
two elliptic cnrves in the isogeny class have 2-primary parts of III isomorphic to 
(Z/4Z)2 X (Z/8Z)2 and (Z/8Z)h 
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